1.20.207.252 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47044
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.252.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022501 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 03:14:12 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 252.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.19.10.27	attackbots	Attempted Brute Force (dovecot)	2020-10-05 05:27:52
49.88.223.137	attack	MAIL: User Login Brute Force Attempt	2020-10-05 05:15:21
52.187.106.96	attackspambots	Oct 3 22:12:36 mail.srvfarm.net postfix/smtpd[661690]: NOQUEUE: reject: RCPT from unknown[52.187.106.96]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:14:18 mail.srvfarm.net postfix/smtpd[661689]: NOQUEUE: reject: RCPT from unknown[52.187.106.96]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:15:18 mail.srvfarm.net postfix/smtpd[661694]: NOQUEUE: reject: RCPT from unknown[52.187.106.96]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:16:18 mail.srvfarm.net postfix/smtpd[661694]: NOQUEUE: reject: RCPT from unknown[52.187.106.96]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct	2020-10-05 05:36:16
77.252.137.108	attackspambots	Oct 3 22:24:23 mail.srvfarm.net postfix/smtps/smtpd[662244]: warning: unknown[77.252.137.108]: SASL PLAIN authentication failed: Oct 3 22:24:23 mail.srvfarm.net postfix/smtps/smtpd[662244]: lost connection after AUTH from unknown[77.252.137.108] Oct 3 22:25:26 mail.srvfarm.net postfix/smtpd[660367]: warning: unknown[77.252.137.108]: SASL PLAIN authentication failed: Oct 3 22:25:26 mail.srvfarm.net postfix/smtpd[660367]: lost connection after AUTH from unknown[77.252.137.108] Oct 3 22:27:56 mail.srvfarm.net postfix/smtps/smtpd[662242]: warning: unknown[77.252.137.108]: SASL PLAIN authentication failed:	2020-10-05 05:36:01
185.40.241.179	attack	Oct 3 22:36:10 mail.srvfarm.net postfix/smtps/smtpd[664799]: warning: unknown[185.40.241.179]: SASL PLAIN authentication failed: Oct 3 22:36:11 mail.srvfarm.net postfix/smtps/smtpd[664799]: lost connection after AUTH from unknown[185.40.241.179] Oct 3 22:38:01 mail.srvfarm.net postfix/smtpd[661686]: warning: unknown[185.40.241.179]: SASL PLAIN authentication failed: Oct 3 22:38:01 mail.srvfarm.net postfix/smtpd[661686]: lost connection after AUTH from unknown[185.40.241.179] Oct 3 22:40:21 mail.srvfarm.net postfix/smtpd[660363]: warning: unknown[185.40.241.179]: SASL PLAIN authentication failed:	2020-10-05 05:19:06
177.67.166.190	attack	Oct 4 04:53:32 mail.srvfarm.net postfix/smtpd[713753]: warning: unknown[177.67.166.190]: SASL PLAIN authentication failed: Oct 4 04:53:32 mail.srvfarm.net postfix/smtpd[713753]: lost connection after AUTH from unknown[177.67.166.190] Oct 4 04:54:30 mail.srvfarm.net postfix/smtpd[713926]: warning: unknown[177.67.166.190]: SASL PLAIN authentication failed: Oct 4 04:54:31 mail.srvfarm.net postfix/smtpd[713926]: lost connection after AUTH from unknown[177.67.166.190] Oct 4 04:54:48 mail.srvfarm.net postfix/smtpd[726656]: warning: unknown[177.67.166.190]: SASL PLAIN authentication failed:	2020-10-05 05:19:44
34.93.0.165	attack	Oct 2 14:07:55 roki-contabo sshd\[1169\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.0.165 user=root Oct 2 14:07:56 roki-contabo sshd\[1169\]: Failed password for root from 34.93.0.165 port 16044 ssh2 Oct 2 14:16:36 roki-contabo sshd\[1487\]: Invalid user target from 34.93.0.165 Oct 2 14:16:36 roki-contabo sshd\[1487\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.0.165 Oct 2 14:16:38 roki-contabo sshd\[1487\]: Failed password for invalid user target from 34.93.0.165 port 52930 ssh2 Oct 2 14:07:55 roki-contabo sshd\[1169\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.0.165 user=root Oct 2 14:07:56 roki-contabo sshd\[1169\]: Failed password for root from 34.93.0.165 port 16044 ssh2 Oct 2 14:16:36 roki-contabo sshd\[1487\]: Invalid user target from 34.93.0.165 Oct 2 14:16:36 roki-contabo sshd\[1487\]: pam_unix\(sshd:auth ...	2020-10-05 05:02:21
189.126.173.27	attackspambots	Oct 4 15:27:28 mail.srvfarm.net postfix/smtps/smtpd[1019621]: warning: unknown[189.126.173.27]: SASL PLAIN authentication failed: Oct 4 15:27:29 mail.srvfarm.net postfix/smtps/smtpd[1019621]: lost connection after AUTH from unknown[189.126.173.27] Oct 4 15:29:53 mail.srvfarm.net postfix/smtpd[1006937]: warning: unknown[189.126.173.27]: SASL PLAIN authentication failed: Oct 4 15:29:53 mail.srvfarm.net postfix/smtpd[1006937]: lost connection after AUTH from unknown[189.126.173.27] Oct 4 15:33:01 mail.srvfarm.net postfix/smtpd[1022610]: warning: unknown[189.126.173.27]: SASL PLAIN authentication failed:	2020-10-05 05:18:35
177.130.163.38	attackspam	Brute force attempt	2020-10-05 05:29:30
185.132.53.145	attack	2020-10-04T00:19:55.319686snf-827550 sshd[7118]: Invalid user oracle from 185.132.53.145 port 41440 2020-10-04T00:19:56.654396snf-827550 sshd[7118]: Failed password for invalid user oracle from 185.132.53.145 port 41440 ssh2 2020-10-04T00:19:58.686112snf-827550 sshd[7120]: Invalid user nagios from 185.132.53.145 port 48806 ...	2020-10-05 05:14:04
103.129.64.4	attack	Attempted Brute Force (dovecot)	2020-10-05 05:34:04
52.187.105.28	attackspambots	Oct 3 22:12:33 mail.srvfarm.net postfix/smtpd[661688]: NOQUEUE: reject: RCPT from unknown[52.187.105.28]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:14:21 mail.srvfarm.net postfix/smtpd[660369]: NOQUEUE: reject: RCPT from unknown[52.187.105.28]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:15:21 mail.srvfarm.net postfix/smtpd[660373]: NOQUEUE: reject: RCPT from unknown[52.187.105.28]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:16:36 mail.srvfarm.net postfix/smtpd[661689]: NOQUEUE: reject: RCPT from unknown[52.187.105.28]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-10-05 05:36:39
88.208.80.33	attackbotsspam	$f2bV_matches	2020-10-05 05:21:51
2001:41d0:1004:2384::1	attackspam	MYH,DEF GET /wp-login.php	2020-10-05 05:06:28
162.158.94.142	attackspambots	srv02 DDoS Malware Target(80:http) ..	2020-10-05 05:03:15

Recently Reported IPs

1.20.207.254	1.20.207.27	62.39.185.138	1.20.207.28
1.20.207.3	1.20.207.32	1.20.207.34	1.20.207.36
1.20.207.38	1.20.207.40	239.115.137.203	1.20.207.42
1.20.207.46	1.20.207.48	1.20.207.5	1.20.207.50
1.20.207.51	1.20.207.52	1.20.207.56	1.20.207.60